Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/13ffc853-d4eb-3a91-b9e1-2abff267e22d.roa
File:                     13ffc853-d4eb-3a91-b9e1-2abff267e22d.roa (raw, json)
Hash identifier:          j0dcHpw8V47YFeCjJgbMtUcZCTs0CC8HcyVnrEuyviM=
Subject key identifier:   84:D2:84:A5:3A:62:95:12:3C:EC:3D:9C:8D:11:F5:8D:EC:55:8E:16
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584D237A73D0369DBDBD7BAEA380
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/13ffc853-d4eb-3a91-b9e1-2abff267e22d.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     207266
IP address blocks:        65.22.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:73:d0:36:9d:bd:bd:7b:ae:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=b530d052-e1e4-4a02-b88d-76de70256915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:1f:1b:9b:9b:5a:33:22:54:44:36:f7:93:
                    f1:7b:47:b2:fa:eb:5f:2c:1f:7e:0f:81:1c:5c:b7:
                    29:ed:92:71:4b:ee:92:9a:d7:38:66:45:40:7b:04:
                    09:b4:bc:6c:9f:1c:56:5d:97:f6:94:c0:df:74:26:
                    9c:5a:33:cd:0b:32:70:1e:02:77:70:77:ef:e8:e4:
                    1a:a3:f3:e8:fb:5d:67:a7:70:d6:84:44:ec:19:5d:
                    ca:74:e9:4c:e4:a2:4a:b0:d6:f0:37:e7:65:17:b9:
                    6a:14:5f:9a:cc:7f:94:5c:40:75:68:16:58:27:a9:
                    d5:5b:2e:ff:2b:c5:5a:d4:33:f7:c0:65:5c:56:51:
                    82:68:43:b4:02:54:76:bf:53:fa:83:f9:dd:1b:0a:
                    25:53:29:96:3b:1a:3b:d5:89:d2:d2:cf:bf:9f:e8:
                    0b:ac:7e:a0:65:ad:43:6d:37:a9:fd:0e:17:df:32:
                    50:91:fb:e6:31:5b:41:f7:de:f8:b7:53:46:c8:44:
                    da:56:c9:51:15:05:9f:97:76:08:07:79:f8:71:5a:
                    19:57:51:f0:e6:90:78:0b:b5:b7:98:cf:62:e2:1e:
                    26:59:b4:dc:e6:97:e9:55:49:20:60:0f:df:46:4b:
                    b3:00:df:75:a8:fd:fe:6b:4b:bb:87:85:2a:d5:f7:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D2:84:A5:3A:62:95:12:3C:EC:3D:9C:8D:11:F5:8D:EC:55:8E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/13ffc853-d4eb-3a91-b9e1-2abff267e22d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:de:a3:5a:f3:6e:49:08:aa:8a:53:ce:5e:9b:f9:1d:30:28:
         38:3a:89:b9:4c:a5:39:ff:7a:40:3f:0f:67:a0:34:80:03:e0:
         df:08:1c:33:06:db:ea:fe:1a:ed:a9:fb:34:61:30:36:02:19:
         7c:14:9a:0b:1b:62:ba:a0:5b:b5:f1:57:ba:6e:c5:dd:8a:63:
         79:fc:ce:48:88:1c:ab:e3:c9:f4:61:5b:da:ac:e9:9b:f8:24:
         ef:59:dc:c4:fe:54:a4:0e:c7:31:a0:45:a1:8f:9c:c9:2d:15:
         bb:dc:22:0c:ac:c2:e4:e6:e3:e7:7c:b5:47:34:4f:01:58:25:
         6c:3a:d2:49:32:ff:6f:e1:80:40:55:94:16:c0:4d:7e:75:b0:
         fc:e6:ef:1c:81:83:06:e5:a7:50:7f:0e:57:1f:46:ce:a5:27:
         b2:9d:d1:ec:f6:b7:28:18:83:a0:79:f8:c0:50:ea:8b:e3:e2:
         49:10:55:ba:26:ff:73:3f:8e:03:a3:6e:72:86:f5:03:66:89:
         05:27:84:2f:64:c3:77:ac:88:65:4a:f5:36:ba:3f:8f:dd:7b:
         25:33:6f:92:e8:34:13:ff:d9:ca:02:52:9b:a0:67:ab:01:5d:
         40:9e:06:b1:9c:4c:39:7d:e4:9f:be:74:d9:49:09:62:59:24:
         48:a9:8f:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jenPQNp29vXuuo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
YjUzMGQwNTItZTFlNC00YTAyLWI4OGQtNzZkZTcwMjU2OTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFYfG5ubWjMiVEQ295Pxe0ey+utfLB9+D4Ec
XLcp7ZJxS+6Smtc4ZkVAewQJtLxsnxxWXZf2lMDfdCacWjPNCzJwHgJ3cHfv6OQa
o/Po+11np3DWhETsGV3KdOlM5KJKsNbwN+dlF7lqFF+azH+UXEB1aBZYJ6nVWy7/
K8Va1DP3wGVcVlGCaEO0AlR2v1P6g/ndGwolUymWOxo71YnS0s+/n+gLrH6gZa1D
bTep/Q4X3zJQkfvmMVtB9974t1NGyETaVslRFQWfl3YIB3n4cVoZV1Hw5pB4C7W3
mM9i4h4mWbTc5pfpVUkgYA/fRkuzAN91qP3+a0u7h4Uq1fcMGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFITShKU6YpUSPOw9nI0R9Y3sVY4WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMTNmZmM4NTMtZDRlYi0z
YTkxLWI5ZTEtMmFiZmYyNjdlMjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRajMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABPeo1rzbkkIqopTzl6b+R0wKDg6iblMpTn/ekA/D2egNIAD4N8IHDMG
2+r+Gu2p+zRhMDYCGXwUmgsbYrqgW7XxV7puxd2KY3n8zkiIHKvjyfRhW9qs6Zv4
JO9Z3MT+VKQOxzGgRaGPnMktFbvcIgyswuTm4+d8tUc0TwFYJWw60kky/2/hgEBV
lBbATX51sPzm7xyBgwblp1B/DlcfRs6lJ7Kd0ez2tygYg6B5+MBQ6ovj4kkQVbom
/3M/jgOjbnKG9QNmiQUnhC9kw3esiGVK9Ta6P4/deyUzb5LoNBP/2coCUpugZ6sB
XUCeBrGcTDl95J++dNlJCWJZJEipj24=
-----END CERTIFICATE-----
Generated at Fri Mar 27 04:15:02 2026 by rpki-client